CVE-2007-4935: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 admin.php, 2 custompages.php, 3 draft.php, 4 faq.php, 5 leagues.php, 6 livedraft.php, 7 login.php, 8 myteam.php, 9 profile.php, 10...

phpFFL PHPFFL_File_Root参数远程文件包含漏洞

phpFFL是一款基于PHP的WEB应用程序。 phpFFL不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'PHPFFLFileRoot'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 phpFFL 1.24 目前没有解决方案提供： http://www.phpffl.com/ http://www.example.com/phpffl/phpfflwebfiles/programfiles/livedraft/livedraft.php?PHPFFLFILEROOT= Evil Cod...

CVE-2007-4934: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 programfiles/livedraft/livedraft.php or 2 programfiles/livedraft/admin.php...

phpFFL 1.24 PHPFFL_FILE_ROOT Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== phpFFL 1.24 PHPFFLFILEROOT Remote File Inclusion Vulnerabilities ================================================================== Title : phpFFL 1.24 Remote File Inclusio...